SUSE CVE-2008-0783

Multiple cross-site scripting XSS vulnerabilities in Cacti 0.8.7 before 0.8.7b and 0.8.6 before 0.8.6k allow remote attackers to inject arbitrary web script or HTML via 1 the viewtype parameter to graph.php; 2 the filter parameter to graphview.php; 3 the action parameter to the drawnavigationtext...

Provide server 跨站脚本漏洞

Provide server is a Windows SFTP server from Provide server, Inc. A security vulnerability exists in Provide server version 14.4. An attacker can exploit this vulnerability to execute arbitrary code in the server logs via the username field in the login table...

Restrict access to Storefront via Gateway based on Login Username

This article will describe how to configure responder policy to restrict access to storefront via gateway based on login username, and also explain the difference between expression "AAA.USER.LOGINNAME" and "AAA.LOGIN.USERNAME"...

Sanitization Management System 跨站脚本漏洞

Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System version v1.0.0. An attacker can exploit this vulnerability to execute arbitrary web script or HTML by injecting a specially...

Digital Alert Systems DASDEC EAS 跨站脚本漏洞

Digital Alert Systems DASDEC EAS is a digital alert system from Digital Alert Systems, Inc. Digital Alert Systems DASDEC EAS suffers from a cross-site scripting vulnerability that can be exploited by a remote attacker to inject arbitrary web script or HTML code via the username field of the login...

Lanner IAC-AST2500A 安全漏洞

The Lanner IAC-AST2500A is a module and accelerator card from Lanner. It is suitable for Lanner network devices to support remote management and monitoring of system operation based on the IPMI standard. A security vulnerability exists in the Lanner IAC-AST2500A standard firmware version 1.00.0,...

CVE-2022-2680

A vulnerability classified as critical has been found in SourceCodester Church Management System 1.0. Affected is an unknown function of the file /login.php. The manipulation of the argument username with the input ' OR SELECT 7064 FROMSELECT COUNT,CONCAT0x71627a7671,SELECT...

CVE-2021-43650

WebRun 3.6.0.42 is vulnerable to SQL Injection via the P0 parameter used to set the username during the login process...

CVE-2021-45435

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

The vulnerability of the Covid-19 contact tracing system’s web app that uses QR code scanning lies in the insufficient protection of operational data, allowing attackers to carry out cross-site attacks.

The vulnerability of the Covid-19 contact tracing system’s web app with QR code scanning lies in the insufficient protection of sensitive data when the username parameter is used on the login page. Exploiting this vulnerability could allow a malicious actor to perform cross-site attacks using a...

Sourcecodester Logistic Hub Parcel Management System SQL注入漏洞

Sourcecodester Logistic Hub Parcel Management System is a simple web-based application project whose main purpose is to provide an automated platform for logistics centers to manage and track parcel records. A SQL injection vulnerability exists in Sourcecodester Logistic Hub Parcel Management...

MartDevelopers Iresturant 跨站脚本漏洞

MartDevelopers Iresturant is an open source lightweight restaurant Erp from MartDevelopers Kenya, designed to integrate social restaurant operations into a single system. A cross-site scripting vulnerability exists in MartDevelopers Iresturant because the product does not effectively filter...

CVE-2020-27163

phpRedisAdmin before 1.13.2 allows XSS via the login.php username parameter...

Firco Continuity Cross-Site Scripting Vulnerability

Firco Continuity is a real-time trade screening solution. A stored cross-site scripting vulnerability exists in Firco Continuity 6.2.0.0. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML via the username field on the login page...

CVE-2018-7282

The username parameter of the TITool PrintMonitor solution during the login request is vulnerable to and/or time-based blind SQLi...

CVE-2019-17205

TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...

IBM Power Hardware Management Console Cross-Site Scripting Vulnerability

IBM Power Hardware Management Console HMC is a suite of graphical interface software from IBM in the United States for configuring and managing the Power System family of servers. The software is primarily used to manage hardware such as servers. A cross-site scripting vulnerability exists in IBM...

Shaarli cross-site scripting vulnerability (CNVD-2018-03979)

Shaarli is a set of website cloning tools from the French Sebsauvage project. A cross-site scripting vulnerability exists in versions of Shaarli before 0.8.5 and 0.9.x before 0.9.3. A remote attacker can exploit this vulnerability to inject arbitrary code via the username field of the login form...

UBUNTU-CVE-2017-11507

A cross site scripting XSS vulnerability exists in CheckMK versions 1.2.8x prior to 1.2.8p25 and 1.4.0x prior to 1.4.0p9, allowing an unauthenticated attacker to inject arbitrary HTML or JavaScript via the outputformat parameter, and the username parameter of failed HTTP basic authentication...

Vonage VDV-23 115 Denial of Service Vulnerability

The Vonage VDV-23 115 is a routing repeater from Vonage USA. A security vulnerability exists in the Vonage VDV-23 115 version 3.2.11-0.9.40. An attacker can exploit this vulnerability to cause a router reboot by sending a loginPassword and/or loginUsername field with a long string to goform/login...